This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft File: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft (raw, json) Hash identifier: QeoWc1WdJCKdYr1BQwP7kp9LJIpbISBJ9KjlVXoKzL4= Subject key identifier: 95:08:B9:42:EE:AD:A0:1B:6A:93:78:B7:EA:BE:9B:52:00:1F:44:5C Authority key identifier: 6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 Certificate issuer: /CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Certificate serial: 4B7923FE10267240AE5C7F27823ABD3761F98AED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft Manifest number: 02D0 Signing time: Tue 02 Dec 2025 20:31:22 +0000 Manifest this update: Tue 02 Dec 2025 20:26:22 +0000 Manifest next update: Sat 06 Dec 2025 05:21:22 +0000 Files and hashes: 1: 6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl (hash: a5MQ1VuwBvnu40t1XzHX9X9Pt5qvuMfLtC6+dl97b+w=) 2: 3130332e3137342e31362e302f32342d3234203d3e20313437303933.roa (hash: KF7nH5pW5/ZblyJqWbcvRko2OuzeK910SdQ0o3we0k8=) 3: 3130332e3137342e31372e302f32342d3234203d3e20313437303933.roa (hash: 1qisgGmZ4ZLz1lme/uSxLcvbwX2pXl2QEYezWVi61a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:79:23:fe:10:26:72:40:ae:5c:7f:27:82:3a:bd:37:61:f9:8a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4 Validity Not Before: Dec 2 20:26:22 2025 GMT Not After : Dec 6 05:21:22 2025 GMT Subject: CN=9508B942EEADA01B6A9378B7EABE9B52001F445C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:10:37:07:5e:a9:e7:4b:bc:dc:06:dc:31: 4b:e9:b3:96:f3:2a:91:90:8e:51:1d:15:68:4b:c2: b4:a0:40:39:55:d2:8b:fb:a8:9d:01:2a:12:a3:33: 86:f5:5c:c9:31:dc:ce:5a:02:cb:63:ee:d3:79:9f: 4e:35:41:af:ed:8f:e9:a6:98:53:35:80:37:ed:f5: 31:7f:57:b7:c2:91:c4:ef:e9:f1:8a:00:af:7a:43: ae:6c:d8:df:2c:75:4e:df:52:fb:28:e5:ad:a2:99: 5d:17:62:f7:89:11:ab:07:09:71:8b:34:c0:dd:13: 16:6d:21:bb:2c:4f:86:60:46:a0:5b:a9:4a:ef:f5: f0:8a:0f:c9:cd:a4:c8:6b:d7:e3:46:fe:af:e4:bd: de:0d:dc:83:15:78:35:7f:c4:47:8e:a0:09:9e:e3: e2:f4:01:46:34:96:c7:e1:04:15:08:d2:22:0b:8f: 1e:05:4b:fc:c9:d4:93:ad:5d:0a:24:c0:45:53:7d: 2e:59:fb:95:09:27:6d:8a:9c:0c:05:49:b9:fe:fe: 11:ba:96:96:af:5d:84:fc:c2:89:d5:6a:52:3d:3e: 2e:70:0d:1f:7b:42:95:86:87:bf:f8:f4:02:37:7e: ab:05:cb:ab:ed:23:f0:44:72:49:51:08:d8:0f:28: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:08:B9:42:EE:AD:A0:1B:6A:93:78:B7:EA:BE:9B:52:00:1F:44:5C X509v3 Authority Key Identifier: keyid:6D:39:05:08:CE:26:22:C5:BA:AA:3B:EE:95:AA:61:27:FE:5B:E5:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce482ada-d0c8-464b-a007-8519489cb1c4/0/6D390508CE2622C5BAAA3BEE95AA6127FE5BE5F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7b:ef:1b:59:52:f7:bb:32:9a:4f:63:17:7a:da:9a:1b:37: 39:82:58:b5:a8:5a:f6:61:10:53:69:4c:82:d6:19:20:55:9c: 5e:cc:39:81:19:bc:12:16:04:03:ae:60:06:e7:87:23:20:72: 2d:51:d6:e6:33:da:bb:1f:29:fc:34:23:85:38:e9:cb:e2:15: cb:66:2c:d1:24:42:b9:36:2b:b2:2f:7b:54:d1:cd:4e:1c:5c: 2a:a1:d7:eb:11:f4:78:1e:6a:e2:da:1f:f2:cd:eb:d6:b1:91: d5:b0:e4:4b:2f:71:72:5c:8d:59:c7:9a:d9:9d:7f:f9:a7:2e: da:c7:cb:83:6e:cd:17:72:6e:44:32:7a:cf:0e:cf:ab:c7:bb: db:07:d2:5f:b8:cf:f4:5a:b8:42:4a:a6:5e:8d:6a:46:68:0f: 91:06:2b:7f:86:65:9f:b6:4c:73:ff:58:03:00:a8:8c:dd:99: 08:0d:8d:6b:f9:fe:d8:7d:64:ee:38:1b:a0:27:6d:48:a1:2d: 45:33:2d:70:f1:a2:bb:08:36:96:57:ac:43:4d:5e:aa:6d:f4: 7c:2a:85:7b:2d:0a:41:2a:e1:48:6b:45:ba:4d:dc:1b:6c:96: 07:86:ad:e6:c9:1c:1b:0a:fe:88:67:47:fa:ff:f6:a8:70:50: df:0c:37:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3kj/hAmckCuXH8ngjq9N2H5iu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdG RTVCRTVGNDAeFw0yNTEyMDIyMDI2MjJaFw0yNTEyMDYwNTIxMjJaMDMxMTAvBgNV BAMTKDk1MDhCOTQyRUVBREEwMUI2QTkzNzhCN0VBQkU5QjUyMDAxRjQ0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEhA3B16p50u83AbcMUvps5bz KpGQjlEdFWhLwrSgQDlV0ov7qJ0BKhKjM4b1XMkx3M5aAstj7tN5n041Qa/tj+mm mFM1gDft9TF/V7fCkcTv6fGKAK96Q65s2N8sdU7fUvso5a2imV0XYveJEasHCXGL NMDdExZtIbssT4ZgRqBbqUrv9fCKD8nNpMhr1+NG/q/kvd4N3IMVeDV/xEeOoAme 4+L0AUY0lsfhBBUI0iILjx4FS/zJ1JOtXQokwEVTfS5Z+5UJJ22KnAwFSbn+/hG6 lpavXYT8wonValI9Pi5wDR97QpWGh7/49AI3fqsFy6vtI/BEcklRCNgPKMqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQi5Qu6toBtqk3i36r6bUgAfRFwwHwYDVR0j BBgwFoAUbTkFCM4mIsW6qjvulaphJ/5b5fQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTQ4MmFkYS1kMGM4LTQ2NGItYTAwNy04NTE5NDg5Y2IxYzQvMC82RDM5MDUwOENF MjYyMkM1QkFBQTNCRUU5NUFBNjEyN0ZFNUJFNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYxMjdGRTVC RTVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ODJhZGEtZDBjOC00NjRiLWEw MDctODUxOTQ4OWNiMWM0LzAvNkQzOTA1MDhDRTI2MjJDNUJBQUEzQkVFOTVBQTYx MjdGRTVCRTVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJR77xtZUve7MppPYxd62pobNzmCWLWoWvZh EFNpTILWGSBVnF7MOYEZvBIWBAOuYAbnhyMgci1R1uYz2rsfKfw0I4U46cviFctm LNEkQrk2K7Ive1TRzU4cXCqh1+sR9HgeauLaH/LN69axkdWw5EsvcXJcjVnHmtmd f/mnLtrHy4NuzRdybkQyes8Oz6vHu9sH0l+4z/RauEJKpl6NakZoD5EGK3+GZZ+2 THP/WAMAqIzdmQgNjWv5/th9ZO44G6AnbUihLUUzLXDxorsINpZXrENNXqpt9Hwq hXstCkEq4UhrRbpN3BtslgeGrebJHBsK/ohnR/r/9qhwUN8MNwU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:06 2025 by rpki-client